Clusterlabs Libqb
2 CVEs affecting Clusterlabs Libqb. Latest disclosed: 2023-08-08. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-39976 | Critical | 9.8 | 2023-08-08 | log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. |
CVE-2019-12779 | High | 7.1 | 2019-06-07 | libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) withou… |